Support TLS, dynamic listeners and encrypted storage

Good point, may be I should make these ones unexported - as they should not be